Michael Bargury

Security research, hacking, AppSec, primarily focused on AI agents.

less than 1 minute read

Assorted links for All You Need Is Guest @ RSAC 2024:

  1. Power Platform DLP Bypass via Copy & Paste
  2. OWASP No-Code / Low-Code Top 10
  3. powerpwn
  4. Microsoft docs on EntraID multitenant sharing options

Other talks (slides and source code)

  1. All You Need is Guest @ BlackHat USA 2023
  2. Sure, Let Business Users Build Their Own. What Could Go Wrong? @ BlackHAt USA 2023
  3. Low Code High Risk: Enterprise Domination via Low Code Abuse @ DEFCON30
  4. No-Code Malware: Windows 11 At Your Service @ DEFCON30

Updated:

You May Also Enjoy

Make Real Progress In Security From AI

1 minute read

I gave a talk at the AI Agent Security Summit by Zenity Labs on October 8th in San Francisco. I’ll post a blog version of that talk here shortly.

How Should AI Ask for Our Input?

2 minute read

Enterprise systems provide a terrible user experience. That’s common knowledge. Check out one of the flash keynotes about the latest flagship AI product by ...

Someone Is Cleaning Up Evidence

1 minute read

AWS security blog confirms the attacker gained access to a write token and abused it to inject the malicious prompt. This confirms our earlier findings.